nerdexam
EC-Council

312-49V11 · Question #118

A computer forensics investigator is analyzing a hard disk drive (HDD) that is suspected to contain evidence of criminal activity. The HDD has 20,000 cylinders, 16 heads, and 63 sectors per track…

Sign in or unlock 312-49V11 to reveal the answer and full explanation for question #118. The question stem and answer options stay visible for context.

Hard Disk and File System Forensics

Question

A computer forensics investigator is analyzing a hard disk drive (HDD) that is suspected to contain evidence of criminal activity. The HDD has 20,000 cylinders, 16 heads, and 63 sectors per track, with each sector having 512 bytes. During the analysis, the investigator discovered a file of 1.5KB in size on the disk. How many sectors are allocated for the file, and what could be the consequences of such allocation for the investigation?

Options

  • A2 sectors; the file might be fragmented, making it harder to retrieve
  • B4 sectors; it may cause inefficiency in space utilization on the disk
  • C3 sectors; it may increase the retrieval time due to increased sector overhead
  • D3 sectors; the file might be fragmented, making it harder to retrieve

Unlock 312-49V11 to see the answer

You've previewed enough free 312-49V11 questions. Unlock 312-49V11 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#disk geometry#HDD sectors#file allocation#storage forensics
Full 312-49V11 Practice